Skip to content
whois.me.uk
Menu
Sign in

google.com

domain Spoofing protected DMARC p=reject

Mail by Google Workspace · Mail handled by smtp.google.com

Re-run JSON PDF Snapshot Watch this
80 / 100 · Fair 7 pass 4 caution 0 fail 1 note Checked 1 second ago · 909 ms

Findings

  • Caution DKIM selector 20230601 is revoked (empty key) DKIM-REVOKED
    Read the fix guide →
  • Caution DKIM selector 20221208 is revoked (empty key) DKIM-REVOKED
    Read the fix guide →
  • Caution DKIM selector 20210112 is revoked (empty key) DKIM-REVOKED
    Read the fix guide →
  • Caution DKIM selector 20161025 is revoked (empty key) DKIM-REVOKED
    Read the fix guide →
  • Note Only one MX host MX-SINGLE

    A second MX gives senders a fallback during maintenance.

    Read the fix guide →

  • Pass smtp.google.com supports STARTTLS (TLSv1.3) SMTP-STARTTLS-OK

    TLS_AES_256_GCM_SHA384

  • Pass SPF uses 1 of 10 permitted DNS lookups SPF-LOOKUPS-OK
  • Pass SPF ends with ~all (soft fail) SPF-SOFTFAIL-ALL

    Fine with DMARC enforcing; -all is stricter.

    Read the fix guide →

  • Pass DMARC policy is p=reject DMARC-REJECT

    Spoofed mail that fails authentication is rejected.

  • Pass MTA-STS is in enforce mode MTASTS-ENFORCE
  • Pass TLS reporting (TLS-RPT) is enabled TLSRPT-OK

    v=TLSRPTv1;rua=mailto:sts-reports@google.com

  • Pass Spoofing protection: enforced SPOOF-PROTECTED

    SPF and DMARC together reject or quarantine forged mail.

Mail servers (MX)

PrefHostAddressReverse DNSSMTP (port 25)
10 smtp.google.com 172.217.76.26, 192.178.223.27, 192.178.223.26, 2a00:1450:4009:c19:0:0:0:1b, 2a00:1450:4009:c0f:0:0:0:1a, 2a00:1450:4009:c0f:0:0:0:1b yulhrp-in-f26.1e100.net ✓
yulhrs-in-f27.1e100.net ✓
 220 banner in 29 ms
STARTTLS TLSv1.3 TLS_AES_256_GCM_SHA384
cert: mx.google.com valid · until Dec 21 18:40:12 2026 GMT

SPF

v=spf1 include:_spf.google.com ~all

DNS lookups: 1 / 10 · terminates with ~all

DMARC

v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com
Policy
reject
Subdomains
same as policy
Alignment
DKIM relaxed, SPF relaxed
Reports to
mailauth-reports@google.com

DKIM

20230601._domainkey · RSA revoked

20221208._domainkey · RSA revoked

20210112._domainkey · RSA revoked

20161025._domainkey · RSA revoked

Selectors are chosen by the sending service, so a key can exist under a name not tried here. The s= tag in a real message header names it.

Transport security

MTA-STS
enforce · mx: smtp.google.com, aspmx.l.google.com, *.aspmx.l.google.com · max_age 86400
TLS-RPT
v=TLSRPTv1;rua=mailto:sts-reports@google.com
BIMI
not published

Open relay test owners only

Checks whether each mail server accepts mail for recipients at other domains, which spammers exploit. Because the test sends SMTP commands to your server, it is only offered to verified owners.

Create an account and verify the domain to run this test.